Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dc14ffca-b55f-4482-beb2-b5748b542177/a5192c1b-83c6-30fa-b4f5-d963a2fc41e5.roa
File:                     a5192c1b-83c6-30fa-b4f5-d963a2fc41e5.roa (raw, json)
Hash identifier:          0Fb7f0V5yuqQXBGE6Jw0GZsf6jaixLxDfZsGcE4LIZ4=
Subject key identifier:   FF:DA:0F:DD:17:F9:72:FF:FA:8B:F4:20:E5:A0:2F:31:15:E5:4B:0E
Certificate issuer:       /CN=dc14ffca-b55f-4482-beb2-b5748b542177
Certificate serial:       010D0C9F4328584966612CA7AF8ED94F822C90C0
Authority key identifier: C0:9D:37:C3:68:54:43:73:86:52:DB:6B:80:9B:05:DB:C0:96:72:AD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dc14ffca-b55f-4482-beb2-b5748b542177.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dc14ffca-b55f-4482-beb2-b5748b542177/a5192c1b-83c6-30fa-b4f5-d963a2fc41e5.roa
Signing time:             Thu 03 Apr 2025 05:02:04 +0000
ROA not before:           Thu 03 Apr 2025 05:02:04 +0000
ROA not after:            Wed 02 Jul 2025 05:02:04 +0000
asID:                     63414
IP address blocks:        45.43.112.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:66:61:2c:a7:af:8e:d9:4f:82:2c:90:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc14ffca-b55f-4482-beb2-b5748b542177
        Validity
            Not Before: Apr  3 05:02:04 2025 GMT
            Not After : Jul  2 05:02:04 2025 GMT
        Subject: CN=d53b519f-6659-45f7-be9d-49b5695f1a5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ac:0d:5f:25:e3:00:5d:d6:a1:02:75:6f:cf:
                    ed:c0:d8:7e:bd:bf:6b:07:f4:0e:a3:cb:35:97:9a:
                    f6:9d:0f:e0:f8:be:29:3c:82:2a:04:05:a7:9a:b2:
                    2b:bc:79:8c:2a:fa:43:4e:ca:fa:3c:99:f5:50:be:
                    36:b7:9e:a7:1e:40:77:f4:b1:7d:59:d4:f0:f8:51:
                    70:1f:29:aa:da:d8:2b:44:42:f4:70:4e:f5:0e:5b:
                    67:0b:cb:4b:ab:00:a9:93:45:bb:6b:22:d1:b0:bc:
                    b5:76:03:d4:df:f9:fe:4f:13:2b:40:77:62:82:f1:
                    71:ed:e5:c4:13:d1:71:fa:5d:cf:cb:0a:57:0d:3b:
                    81:7e:38:27:fe:81:a2:3c:11:a2:b2:5d:d2:e5:47:
                    f0:cd:4f:46:cf:72:da:93:1c:b7:1b:c2:13:e5:9d:
                    06:89:7c:2d:6c:a7:3d:36:77:e1:01:29:bb:88:c1:
                    9d:02:f2:44:a3:cf:31:c0:96:7a:27:93:fa:ae:48:
                    ad:bf:f4:c6:4b:9b:3f:ca:ee:49:52:f0:4a:27:1a:
                    af:3c:dd:55:61:70:cb:13:08:d7:66:b3:a6:fa:4e:
                    42:00:f7:02:9e:c3:ce:05:d9:dc:31:23:da:2a:f7:
                    db:e1:87:66:a9:8d:81:ee:76:a6:84:7b:3e:2d:88:
                    19:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:DA:0F:DD:17:F9:72:FF:FA:8B:F4:20:E5:A0:2F:31:15:E5:4B:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dc14ffca-b55f-4482-beb2-b5748b542177/a5192c1b-83c6-30fa-b4f5-d963a2fc41e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dc14ffca-b55f-4482-beb2-b5748b542177/dc14ffca-b55f-4482-beb2-b5748b542177.crl

            X509v3 Authority Key Identifier:
                keyid:C0:9D:37:C3:68:54:43:73:86:52:DB:6B:80:9B:05:DB:C0:96:72:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dc14ffca-b55f-4482-beb2-b5748b542177.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.43.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:b2:d4:84:23:4f:5d:63:85:0d:e1:30:9a:91:fa:a8:3e:f1:
         46:af:38:b4:7e:ab:c7:2c:74:74:fb:9a:3f:a7:64:64:e1:44:
         f5:f4:3c:17:98:7a:46:42:aa:d2:85:69:4b:a5:2f:07:f7:de:
         b3:80:3a:22:95:26:58:c7:65:66:b5:5d:56:e7:b1:1e:06:ab:
         17:2a:d2:74:b8:80:47:08:8a:44:8a:9f:ee:47:fc:fd:c6:58:
         5f:ae:8c:d5:26:51:62:36:7d:5a:59:cd:b5:c1:83:14:6a:55:
         56:47:94:e5:fe:93:ac:68:61:50:88:de:07:69:dc:01:4d:77:
         9f:f2:0a:e5:c8:ab:8c:b0:f8:3f:36:48:24:eb:f7:ef:85:9d:
         be:0f:13:40:6c:16:b2:75:f9:68:30:bb:73:7e:7b:c1:2d:42:
         fa:76:8e:24:67:01:67:c6:24:00:b6:2a:69:4b:92:c1:51:62:
         e2:73:d3:6b:72:5a:41:f4:34:14:47:da:d4:88:33:92:08:8e:
         fc:98:bb:6d:a6:b1:c8:ad:31:97:29:0f:7e:4f:29:89:f4:bf:
         52:58:1f:56:e0:89:48:40:89:37:b3:3c:02:ff:03:6b:36:9f:
         f3:a9:e9:cd:ef:88:25:80:b3:e0:1c:b1:9b:26:f3:51:64:b3:
         09:6e:a2:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:28:18 2025 by rpki-client on console.sobornost.net